@myclaw163/clawclaw-cli@0.7.9: Manual Review npm security report | LPM Firewall

Loading npm security reports…

@myclaw163/clawclaw-cli@0.7.9: Manual Review npm security report | LPM Firewall

Source & flagged code

11 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/enable_ccl_permissions.cjsView file

12L13: const fs = require("fs"); L14: const os = require("os");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/enable_ccl_permissions.cjsView on unpkg · L12

src/runtime/owner-control.tsView file

4import { join } from 'path'; L5: import { connect, createServer, type Server, type Socket } from 'net'; L6: import type { AuthProfile } from '../lib/auth.js'; ... L15: // owner-control requests by monkey-patching global JSON. L16: const SAFE_JSON_PARSE = JSON.parse.bind(JSON) as typeof JSON.parse; L17: const SAFE_JSON_STRINGIFY = JSON.stringify.bind(JSON) as typeof JSON.stringify; ... L97: const hash = createHash('sha1').update(stateDir).digest('hex').slice(0, 12); L98: if (process.platform === 'win32') return `\\\\.\\pipe\\clawclaw-${hash}-${pid}-${nonce}`; L99: const userId = typeof process.getuid === 'function' ? String(process.getuid()) : hash; ... L115: function sendLine(socket: import('net').Socket, value: OwnerControlResponse): void { L116: socket.end(`${SAFE_JSON_STRINGIFY(valu

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/runtime/owner-control.tsView on unpkg · L4

scripts/sync-bundled-skill.mjsView file

3import { L4: cpSync, L5: existsSync, L6: mkdirSync, L7: readdirSync, ... L10: statSync, L11: writeFileSync, L12: } from 'fs'; ... L35: const homeDir = homedir(); L36: const claudeHome = process.env.CLAUDE_CONFIG_DIR?.trim() || join(homeDir, '.claude'); L37: const codexHome = process.env.CODEX_HOME?.trim() || join(homeDir, '.codex'); L38: return [

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/sync-bundled-skill.mjsView on unpkg · L3

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.7.8 matchedPath = scripts/sync-bundled-skill.mjs matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.7.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/sync-bundled-skill.mjsView on unpkg

scripts/find-hide-spots.pyView file

•path = scripts/find-hide-spots.py kind = build_helper sizeBytes = 6445 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/find-hide-spots.pyView on unpkg

scripts/enable_monitor.cjsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.7.8 matchedPath = scripts/enable_monitor.cjs matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.7.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/enable_monitor.cjsView on unpkg

scripts/check_monitor.cjsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.7.8 matchedPath = scripts/check_monitor.cjs matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.7.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/check_monitor.cjsView on unpkg

scripts/sync-frontend-map.mjsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.7.8 matchedPath = scripts/sync-frontend-map.mjs matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.7.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/sync-frontend-map.mjsView on unpkg

src/runtime/framework/events/sqlite-event-repository.tsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.7.8 matchedPath = [redacted]-event-repository.ts matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.7.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/framework/events/sqlite-event-repository.tsView on unpkg

Source & flagged code

11 flagged

package.jsonView file

Lines 28-68json

28 "QUICKSTART_OTHER.md",

29 "QUICKSTART_OPENCLAW.md",

30 "QUICKSTART_HERMES.md",

31 "docs/runtime/",

32 "docs/desktop-event-push.md",

33 "docs/configuration.md",

34 "docs/自定义策略.md",

35 "docs/自定义感知.md"

36 ],

37 "scripts": {

38 "typecheck": "tsc --noEmit",

39 "test": "vitest run --maxWorkers=8",

40 "test:watch": "vitest",

41 "sync:frontend-map": "node scripts/sync-frontend-map.mjs",

42 "check:frontend-map": "node scripts/sync-frontend-map.mjs --check",

43 "replay:perception": "tsx scripts/replay-perception.ts",

44 "compare:perception": "tsx scripts/compare-perception-replays.ts",

45 "watch:perception": "tsx scripts/watch-perception-events.ts",

46 "prepack": "node scripts/package-readme.mjs prepare",

47 "postpack": "node scripts/package-readme.mjs restore",

48 "postinstall": "node scripts/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L48

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L48

49 "release:patch": "npm version patch && npm publish --registry https://registry.npmjs.org --access public",

50 "release:minor": "npm version minor && npm publish --registry https://registry.npmjs.org --access public",

51 "release:major": "npm version major && npm publish --registry https://registry.npmjs.org --access public"

52 },

53 "dependencies": {

54 "amaro": "^1.1.11",

55 "commander": "^12.0.0",

56 "skills": "1.5.1",

57 "tsx": "^4.0.0",

58 "undici": "^6.21.3",

59 "ws": "^8.16.0"

60 },

61 "devDependencies": {

62 "@types/node": "^22.20.1",

63 "@types/ws": "^8.5.10",

64 "typescript": "^5.4.0",

65 "vitest": "^3.1.0"

66 }

67}

68

scripts/enable_ccl_permissions.cjsView file

Lines 1-32javascript

1#!/usr/bin/env node

2/**

3 * Add ClawClaw gameplay permissions to Claude Code's permissions.allow list.

4 *

5 * This script intentionally only edits ~/.claude/settings.json permissions.allow.

6 * It does not back up, revert, remove, or rewrite any other settings.

7 *

8 * Usage:

9 * node enable_ccl_permissions.cjs

10 * node enable_ccl_permissions.cjs --dry-run

11

src/runtime/owner-control.tsView file

Lines 1-24typescript

1import { createHash, randomBytes } from 'crypto';

2import { chmodSync, existsSync, mkdirSync, readFileSync, unlinkSync } from 'fs';

3import { tmpdir } from 'os';

4import { join } from 'path'

scripts/sync-bundled-skill.mjsView file

Lines 1-23javascript

1import { spawnSync } from 'child_process';

2import { createHash } from 'crypto';

3import {

4 cpSync,

5 existsSync,

6 mkdirSync,

7 readdirSync,

scripts/find-hide-spots.pyView file

•path = scripts/find-hide-spots.py kind = build_helper sizeBytes = 6445 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/find-hide-spots.pyView on unpkg

scripts/enable_monitor.cjsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.7.8 matchedPath = scripts/enable_monitor.cjs matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.7.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/enable_monitor.cjsView on unpkg

scripts/check_monitor.cjsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.7.8 matchedPath = scripts/check_monitor.cjs matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.7.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/check_monitor.cjsView on unpkg

scripts/sync-frontend-map.mjsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.7.8 matchedPath = scripts/sync-frontend-map.mjs matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.7.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/sync-frontend-map.mjsView on unpkg

src/runtime/framework/events/sqlite-event-repository.tsView file

•matchType = normalized_sha256 matchedPackage = @myclaw163/clawclaw-cli@0.7.8 matchedPath = [redacted]-event-repository.ts matchedIdentity = npm:QG15Y2xhdzE2My9jbGF3Y2xhdy1jbGk:0.7.8 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

src/runtime/framework/events/sqlite-event-repository.tsView on unpkg